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A set of nonlocal correlations that have come to be known as a PR box suggest themselves as 
a natural unit of nonlocality, much as a singlet is a natural unit of entanglement. We present two 
results relevant to this idea. One is that a wide class of multipartite correlations can be simulated 
using local operations on PR boxes only. We show this with an explicit scheme, which has the 
interesting feature that the number of PR boxes required is related to the computational resources 
necessary to represent a function denning the multipartite box. The second result is that there are 
quantum multipartite correlations, arising from measurements on a cluster state, that cannot be 
simulated with n PR boxes, for any n. 
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By performing measurements on an entangled quan- 
tum system, two separate observers can obtain corre- 
lations that are nonlocal, in the sense that the joint 
probabilities P{a\a2\x\X2) for the observers to get the 
outcomes cii and ai given the measurements x\ and X2 
cannot be written in the product form P{a\a2\x\X2) = 
Y,j PjPj{o>i\xi)Pj(a 2 \x2) with pj > and Y,jPj = 1 0- 
The nonlocal character of the correlations implies that 
two parties who wish to simulate the experiment with 
classical resources only cannot do so without communi- 
cation. Nonlocal correlations, although they cannot be 
used to signal from one observer to the other, can be ex- 
ploited in various information processing tasks, such as 
in communication complexity [2|, or for the distribution 
of a secret key between two parties 0. 

Nonlocality can thus be viewed as an information- 
theoretic resource and investigated as such Forty 
years after Bell's seminal paper, however, we still lack a 
proper theoretical framework — analogous, e.g., to the 
framework that has been developed for the study of en- 
tanglement — that would allow us to answer unambigu- 
ously questions such as, can two given sets of nonlocal 
correlations be considered equivalent resources, or, what 
is a good measure of nonlocality. In particular, we have 
not yet identified what would constitute a unit of nonlo- 
cality, in the same way that the singlet state constitutes 
the unit of entanglement. 

To progress on these issues, drawing analogies with 
entanglement is a natural way to proceed. But note a 
conceptual difference between entanglement and nonlo- 
cality: while entanglement is intimately related to the 
tensorial structure of quantum mechanics, nonlocality, on 
the contrary, can be defined without reference to quan- 
tum theory. In particular, it is possible to write down 
sets of nonsignaling correlations that are more nonlocal 
than allowed by quantum mechanics [f|. Why is quan- 
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turn mechanics not more nonlocal jo]? What are the 
implications of the quantum restrictions, and what are 
the principles at the origin of these restrictions 0? A 
quantitative approach to nonlocality, as required in an 
information-theoretic perspective, may help us answer 
these questions. 

In this spirit, it is useful to consider nonlocal correla- 
tions in the abstract, and not necessarily as arising from 
a set of measurements on a quantum state. Suppose that 
two observers have access to a black box. When an ob- 
server i introduces an input Xi , the box produces an out- 
put at. The box is characterized by the joint probability 
P{aia,2 \x1X2) of obtaining the output pair (01,02) given 
the input pair (xi,X2)- Compatibility with special rel- 
ativity requires that these joint probabilities satisfy the 
nosignaling conditions 

^2P{aia 2 \xiX2) = ^P(aia 2 \xix' 2 ) = P(ai|xi) (1) 



for all ai,xi,X2,x' 2 , as well as a similar set of conditions 
obtained by summing over the first observer's outputs. 
This ensures that one observer cannot signal to the other 
via his choice of input in the box. Apart from these 
constraints, the joint distribution can be arbitrary, and 
in particular nonlocal. The definition of nonlocal boxes 
generalizes to more parties in a straightforward way. 

Some comparisons with entangled quantum states are 
as follows. Nonlocal boxes and entangled states both rep- 
resent undirected resources that can be shared between 
two or more parties. In both cases, the set of allowed 
states is convex. Extremal elements of this convex set can 
be thought of as pure states, whereas others are mixed 
states. There is a notion of monogamy of nonlocality 
analogous to the monogamy of entanglement 0. 

Entanglement theory is based on the notion that the 
entanglement contained in different quantum states can 
be compared by interconverting them through local op- 
erations and classical communication (LOCC), where a 
basic premise is that LOCC cannot on average increase 
the entanglement. In the case of bipartite pure states, 
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reversible interconversion is possible, at least asymptot- 
ically, and this leads to a unique measure of entangle- 
ment. In the case of multipartite states, or bipartite 
mixed states, reversibility is not in general possible, and 
this makes the situation more complicated. But still, we 
do have that any entangled state (bipartite or multipar- 
tite) can be obtained from sufficient copies of the singlet 
state. Similarly, it is possible to study interconversions 
between nonlocal boxes, i.e., the simulation of nonlocal 
boxes using other boxes as a resource. In this context, 
the parties are allowed unlimited access to shared ran- 
domness and have the ability to perform local operations, 
such as relabelling inputs and outputs, or using the out- 
put for one box as the input for another box. Communi- 
cation, however, is not allowed, since it enables trivially 
the simulation of any nonlocal box. We can now ask the 
following question. Is there an elementary nonlocal box 
that allows the simulation of all other boxes, and which 
could thus be viewed as a unit of nonlocality? 

A plausible candidate is the following box, which was 
described by Kalfhi and Tsirelson and was indepen- 
dently introduced in a more physical context by Popescu 
and Rohrlich |6|]. It takes two inputs xi,x 2 £ {0, 1} and 
produces two outputs a\,a 2 G {0,1} according to the 
joint distribution 

, i s / 1/2 : ai+a 2 =xix 2 mod 2 , , 
P(a 1 a 2 \x 1 x 2 ) = l [Q < : otherwige _ (2) 

The marginals thus satisfy P(0|xi) = P(l\xi) = 1/2 
and similarly for x 2 . By Tsirelson's theorem |8|, these 
correlations cannot be obtained from measurements on 
any quantum state. Following the denomination used 
in other works, we will refer to this box as a Popescu- 
Rohrlich (PR) box. The PR box is maximally nonlocal 
for the class of two-input two-output boxes, the simplest 
class of nonlocal boxes and is a natural primitive for 
communication complexity as it allows the solution of 
any problem with one bit of communication . In anal- 
ogy, the singlet state is the maximally entangled state of 
two qubits, the simplest family of entangled states, and 
is a natural primitive for entanglement consuming infor- 
mation processing tasks, such as teleportation or dense 
coding. 

To answer our previous question, it is important to de- 
termine if all nonlocal correlations can be obtained from 
PR boxes, or if they are any which cannot. It was shown 
in 0, that all two- input bipartite boxes can be simu- 
lated with PR boxes (at least in an approximate sense). 
It is also known that one PR box is sufficient to repro- 
duce correlations arising from arbitrary von Neumann 
measurements on the singlet state Other examples 
of correlations that can be simulated with PR boxes are 
given in [lOj. 

In this article, we investigate further the potential of 
the PR box. We first present a simple protocol that al- 
lows the simulation of a large class of two-output boxes. 
These boxes are natural generalizations of the PR box to 
more inputs and more parties. It follows from our con- 



struction that any n-partite communication complexity 
problem can be solved with n — 1 bits of communication 
and a number of PR boxes related to the computational 
resources necessary to represent its objective function. A 
second consequence of our result is that any bipartite box 
with binary outputs can be simulated with PR boxes. We 
then consider a box that does not belong to the previous 
class. It arises from measurements of Pauli operators on 
a cluster state of five qubits. We demonstrate that the 
corresponding correlations cannot be simulated with PR 
boxes, or even with arbitrary bipartite boxes. 

We now show how PR boxes can simulate a large class 
of multipartite correlations. These boxes are n-partite 
boxes with an arbitrary number of inputs for each party 
and with binary outputs. We denote the n-tuple of inputs 
as x = (x\ . . . , x n ), where, without loss of generality, each 
input Xi £ {0, . . . , 2 m — 1} and can thus be represented by 
a m-bit string. The n-tuple of outputs is a — (cii . . . , a„), 
where S {0,1}. We consider boxes characterized by 
the following joint distribution 

p(d\x) I 1/2 "~ 1 : T.i<* = m mod 2 

^ [a]X) - { : otherwise, [6) 

where f(x) is a Boolean function of the inputs. Note that 
the outputs for any subset of n — 1 parties are completely 
random. The only nontrivial correlations thus involve the 
full set of n parties. Boxes of the form are the most 
general two-output boxes with this property. We will 
refer to them as full-correlation boxes. 

Theorem 1 Any full- correlation box can be simulated 
with PR boxes. 

Proof. Our proof uses the fact that a Boolean func- 
tion can be represented as a Boolean circuit, and that 
the NAND gate, whose action on two input bits q and 
r is NAND(q,r) = qr + 1, constitutes a universal gate 
for Boolean circuits ^J. We begin by supposing that 
the n parties have already succeeded in simulating a 
full correlation n-partite box with outputs Pi such that 
Y]. pj = gi(x), and a full correlation n-partite box with 
outputs 7i such that Ylili = 52 {%)■ We show how, by 
using these two boxes along with n(n — 1) PR boxes, they 
can simulate a single n-partite box with outputs ai such 
that X)i a i = NAND (gi (x) , g 2 {x)). The simulation of a 
general full-correlation box, using PR boxes only, con- 
sists of iterations of this basic building block - one for 
each NAND gate in a circuit that evaluates f(x). 

Suppose then that each party possesses two bits Pi and 
7i, such that the n-bit strings P and 7 satisfy respectively 
12iPi = ffi(^) an( i J2ili = 92(x). Each pair of parties 
shares two PR boxes between them (making a total of 
?i(n— 1)). Let Bij,i ^ j, denote a PR box shared between 
party i and j. (Our notation is such that the two PR 
boxes shared between parties i and j are E>ij and Bji.) 
In box B>ij party i inputs Pi and gets an output fry , while 
party j inputs 7, and gets an output cy . It thus follows 
that bij + c-ij = Pijj. The final output of party i is given 
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by di = Y,j^i + + where n = 1 if i = 1, 

Ti = otherwise. If we sum (modulo 2) the n outputs we 
thus get 

e ai = e e ( 6 « + ^ + e ^ + e ri 

XX ( 6 « + <*i ) + E + E n 
= EE^ + 1 = E&E^ + 1 

i j i j 

= gi (x)g 2 (x) + l = N AND ( gi (x) , g 2 (x)) . (4) 

Moreover, because the outputs of a PR box are locally 
completely random, the outputs for any subset of n — 1 
parties take each of the possible values in {0, l}™ -1 with 
equal probability. It follows that each possible value of a 
consistent with J^. <2j = NAND(gi(x), ffa(^)) occurs with 
probability 1/2™ -1 as required in 

Consider again a circuit comprised of NAND gates that 
evaluates f(x), such that the inputs to the final NAND 
gate in the circuit are g± (x) and g 2 (x) . If we assume that 
we can already simulate the boxes characterized by g\ 
and g 2 , then we can simulate the f(x) box. But gi(x) 
is itself the output of a NAND gate with inputs hi(x) 
and h-i{x), so we can simulate the g\ box with the same 
construction. We keep working backwards until we reach 
the point where inputs to NAND gates are simply the 
input bits themselves. But the corresponding boxes are 
local and can be simulated without PR boxes. □ 

Corollary 1 Any n-partite communication complexity 
problem can be solved with n — 1 bits of communication 
and at most kn(n — l) PR boxes, where k is the size of the 
smallest circuit comprised of NAND gates that computes 
fix). 

In communication complexity, n parties are each given 
an input Xi and must compute a function fix) of their 
joint inputs while communicating as little as possible. 
This problem can easily be solved if the parties share a 
box of the form |JSJ . It suffices that each party introduces 
his input into the box and communicates his output to 
the first party, who can recover the value of f(x) by sum- 
ming all the outputs. Corollary 1 then simply follows 
from Theorem 1. 

Corollary 2 Any two-output bipartite box can be simu- 
lated with PR boxes. 

We sketch the proof. 

Proof: For a fixed number of inputs and outputs, the 
set of nonlocal bipartite boxes is a convex polytope Q. 
To simulate any two-output bipartite box, it is thus suf- 
ficient to simulate every box which is a vertex of the cor- 
responding polytope, since the others can be obtained 
as mixtures of vertices. Further, it is sufficient to focus 
on genuine two-output boxes, that is on boxes such that 
for every input x\, P(0|a;i) > and P(l|iEi) > 0, and 



similarly for every input x 2 . Indeed, if a box satisfies 
P(0|xi) = or P(l|xi) = for some x\, it is straight- 
forward that we can simulate this box if we can simulate 
the box obtained from it by removing input x\. Finally, 
it is then easy to show that every genuine two-output 
extremal box is of the form @. (This can be done, for 
example, by adapting a proof of [4j , where the polytope 
of two-input ci-output boxes is characterized.) □ 
We have noted that the outputs for any subset of fewer 
than n parties are completely random in boxes of the 
form © and that these are the most general boxes with 
this property. We now give an example of correlations 
that are not of that form and that cannot be simulated 
with PR boxes. The fact that there exist nontrivial cor- 
relations between subsets of the parties is crucial to prove 
this fact. The correlations arise from spin measurements 
on a one dimensional cluster state of five qubits in a ring 
[l2|. Cluster states are remarkable in that they can act 
as a universal substratum for measurement based com- 
putation H3. as well as playing a role in quantum error 
correction [14), Their nonsimulability by PR boxes is 
thus another interesting property. The correlations can 
be described as follows. Let inputs x = and x = 1 
correspond to spin measurements in the o~ z and cr x bases, 
and let a, be the output of party i for input Xi = 0, and 
a[ for input Xi — 1. Then we have 

&i + a! 2 + 03 = mod 2 , (5) 

and cyclic permutations of the parties, together with 

a\ + a' 2 + a' 3 + a' 4 + a' 5 = 1 mod 2 . (6) 

These correlations were described in 15] and constitute 
a GHZ-type paradox. (If values are assigned locally to 
at and a[ for each party, then on summing the left hand 
sides together one obtains 0; summing the right hand 
sides, on the other hand, gives 1.) 

Theorem 2 The correlations of Eqs. 0) and @) cannot 
be simulated exactly by parties who share random data 
and n PR boxes, for any n. 

In order to prove this result, it is useful to describe 
how a general protocol that aims to simulate these corre- 
lations with boxes will work. Let the value of the shared 
random data on a given round be A, with probability 
P(A). Consider a particular party, Alice say, and denote 
her measurement x. Suppose that Alice shares m boxes 
with other parties. Label these boxes B\, . , . , B m . Alice 
proceeds as follows. 

1. She puts an input y\ into box B^, where i± = 
ii(X,x), and y\ = y\{\,x). She obtains an output 
a±. 

2. She puts an input y 2 into box Bi 2 , where i 2 — 
£2 (A, x, ai), and y 2 — y 2 (\, x, a\). She obtains an 
output a 2 . 
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3. She continues in this fashion until all m boxes 
have been used. Her final output is a function 

a = a(X, 

Finally, a different strategy along these lines may of 
course be defined for each party. 

Note that the nosignaling conditions ensure that the 
correlations P{a 2 ■ ■ ■ a n \x2 • ■ ■ %n) restricted to the other 
parties do not depend on the specifics of Alice's protocol. 
In particular they do not depend on wether Alice uses her 
boxes or not. 

Proof of Theorem 2: We begin by supposing that there 
is a protocol for simulating the above correlations exactly 
using n PR boxes. Then we show that this implies that 
there is a protocol for simulating the correlations exactly 
using shared random data alone. This we know to be 
impossible. 

A protocol for simulating the correlations must of 
course produce outputs correlated according to the six 
equations described by (J5J and 0. Consider the case in 
which Alice's measurement is x\ = 0. She follows some 
strategy as described above. Suppose that there is some 
set of values of A, ot\, . . . , a m -i, occurring with non-zero 
probability, such that ai(A, x\ = 0, a\, . . . , a m -i, a m — 
0) 7^ ai(A, x\ — 0, a\, . . . , a m _i, a m = 1). Suppose that 
the m th PR box in this sequence is shared with party 5. 
Eq. JSJ) implies that the outputs of parties 1, 2 and 3 
should be correlated according to a\ + a' 2 + &3 = 0. Since 
this equation does not involve party 5, we may as well 
assume, by nosignaling, that party 5 does not use her half 
of the box. Then a m is random and uncorrelated with 
the rest of the protocol. This means that, conditioned 
on the specified values of A, Oi\, . . . , a m „i occurring, Al- 
ice has a 1/2 chance of outputting a value a\ that is not 
correctly correlated with the outputs of parties 2 and 3. 
Furthermore, it does not matter whom the m th box is 
shared with. For any of the other parties, there is one 
equation (JSJ) such that Alice's input is x\ = and the 
other party is not involved. 

We can conclude from the above that 
ai(A, x\ = 0,ai, . . . ,a m _i,a m = 0) = ai(A,xi = 0, a\, 
. . . , Oro-i, a m = 1) for all values of A, a±, . . . , a m _i. 
This means that in fact, Alice never needs to know the 
value of a m , and her strategy may as well terminate 
before putting an input into the m th box. But now 
we can run an identical argument for the (m — l) st 
box, concluding that Alice's strategy terminates after 
the (to — 2) nd box, and so on. We conclude that if 
errors are not tolerated, Alice's output, in the event 
her measurement is x\ — 0, must be fixed by A alone, 
and she does not use her boxes. We can then run this 
argument for each of the five parties. 

Finally, consider Alice's strategy in the event her mea- 
surement is x\ = 1. Then her output should satisfy 
the constraint a[ + a 2 + = 0. We have already estab- 
lished that in this case, parties 2 and 5 do not use PR 
boxes, and output values that depend only on A. Thus 



Alice's output must also be deterministic, and fixed by 
A. The PR boxes in her possession simply output values 
that are random and uncorrelated with the rest of the 
protocol, so she cannot use them. This argument may 
now be run for each of the five parties. 

We have established that none of the five parties in fact 
use the PR boxes in their possession, for any of the mea- 
surements Xi = 0, 1. Thus if they are producing exactly 
the required correlations, they are doing so using only 
shared random data. This we know to be impossible, 
which concludes the proof. □ 

It is straightforward to modify the proof we have just 
given to show that the correlations JSJ and 10 cannot be 
reproduced with any bipartite box (including boxes with 
more inputs or outputs than a PR box). 

Conclusion. We have shown that PR boxes can be used 
to simulate a large class of correlations. These include all 
bipartite boxes with binary outputs, and therefore, for 
example, von Neumann measurements on non-maximally 
entangled states of two qubits (Cerf et al. have shown 
that a single PR box can simulate a maximally entan- 
gled state |9|). This encourages the idea that PR boxes 
should be considered as a proper unit of bipartite nonlo- 
cality. In a multipartite scenario, we have seen that PR 
boxes cannot simulate correlations arising from measure- 
ments on a five-qubit cluster state. One could consider 
the approximate simulation of these correlations, where 
one demands that the error can be made arbitrary small. 
It seems reasonable to think that even in this case, PR 
boxes cannot simulate the cluster state correlations we 
described, in which case they cannot be considered as a 
unit of nonlocality in a multipartite scenario. 

It thus appears that the structure of nonlocal correla- 
tions is rather different from the structure of entangle- 
ment. There are many open questions, for example, are 
there n-partite boxes such that any set of (n — fc)-partite 
boxes are not sufficient for their simulation? Can we de- 
fine a finite set of boxes that would be sufficient for the 
simulation of all n-partite boxes? One obvious reason for 
the difference between entanglement and nonlocal boxes 
may be the fact that we have not allowed classical com- 
munication in our protocols for manipulating boxes. An 
interesting extension of these ideas would be to introduce 
secrecy, and to see how boxes can be transformed in the 
presence of public, but not private communication. 

Note added. After completion of this work, N. Jones 
and LI. Masanes informed us that they independently 
derived the result of Corollary 2 [l6| . 
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